General
- Target 0c023de3d922fd90f310e6a02fc74d35.exe
- Size 757KB
- Sample210310-ldv4cfvdwj
- SHA256 6ed53f6643dcd36904ac60d32e8f0966d71bc8445d5295cb0414b7229f1864df
- MD5 0c023de3d922fd90f310e6a02fc74d35
- SHA1 993a3d154d982b82cf06cc9bf5ce29128118aed3
- SHA512 6407abf54883f8270e1b153b5e646a1102bd265d7247a36b013477e925513e506094d5c0c70e18955cb14a61693d3299e6d6f0c5dfeff34f76239033445bdcc2
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
0c023de3d922fd90f310e6a02fc74d35.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
0c023de3d922fd90f310e6a02fc74d35.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
mail.privateemail.com
-
Port
587
-
Username
-
Password
@Mexico1.,
Targets
-
- Target 0c023de3d922fd90f310e6a02fc74d35.exe
- Size 757KB
- SHA256 6ed53f6643dcd36904ac60d32e8f0966d71bc8445d5295cb0414b7229f1864df
- MD5 0c023de3d922fd90f310e6a02fc74d35
- SHA1 993a3d154d982b82cf06cc9bf5ce29128118aed3
- SHA512 6407abf54883f8270e1b153b5e646a1102bd265d7247a36b013477e925513e506094d5c0c70e18955cb14a61693d3299e6d6f0c5dfeff34f76239033445bdcc2
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext